Privacy & data retention

Service-specific reference. Chat, Mobile, Platform and the managed API are under maintenance. The retained descriptions below concern those hosted products, not locally downloaded weights or Code CLI direct/BYOK use. For binding current terms, consult the SimpleDirect Privacy Policy  and Terms . Code mode details are documented in the CLI privacy reference .

Vinci is built to retain as little as possible. By default we don’t store the content of your conversations — but a few features you opt into do store data you create. This page is precise about which is which.

What we don’t retain by default

• API. Message content is never written to logs, analytics, or any datastore. For metering we record only metadata — model, token counts, status, and timestamps.
• Web app. Your conversation history is stored locally in your browser (IndexedDB) by default, not on our servers. Clear it anytime.
• Demo (no account). We keep only a small signed counter to enforce the free message limit. Nothing you type is stored.

What is stored — because you asked it to be

These features exist to keep data for you, so they store it. Each is scoped to your account and removable:

• Memories. Facts you save (or let Vinci save) are stored on your device by default; with device sync on, they’re also saved to your account so they’re available across your devices. View, edit, or delete them under Account → Memory; deletions take effect immediately.
• Skills / custom instructions. Instructions and skills you author are saved to your account and applied to future chats until you remove them.
• Uploaded documents. Documents you upload for retrieval are stored, scoped to your account, and deleted when you delete them.
• Shared artifacts. If you create a shareable link to an artifact, that artifact is stored and reachable via the link until you revoke it.
• Synced conversations. Device sync is off by default. If you turn it on, your conversations are stored (encrypted at rest) so they follow you across devices. Turn it off anytime; local history stays on your device.

Where it runs

• Model inference is served by DeepInfra or Fireworks, depending on the class, using Canadian and US infrastructure. Zero Data Retention is enforced with both providers.
• Account data (email, hashed keys, usage and credit balances), synced conversations, and uploaded documents are stored in Canada (Montréal, ca-central-1).
• Web search is served primarily through Canadian infrastructure, with a US provider as a fallback.
• Email delivery and optional product analytics are handled by US services (SendGrid and PostHog); analytics is off unless you enable it, and never includes message content.

Your account & keys

• API keys are stored only as a hash; the secret is shown once. Rotate or revoke anytime — a revoked key stops working immediately.
• Email verification and password reset protect account access.
• We collect the minimum needed to run the service.

This page describes how the product is built. For binding legal terms, see the SimpleDirect terms of service and privacy policy.